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Abstract 

We discuss a real-valued expansion of any Hermitian operator defined in a 
Hilbert space of finite dimension N, where N is a prime number, or an integer 
power of a prime. The expansion has a direct interpretation in terms of the 
operator expectation values for a set of complementary bases. The expansion 
can be said to be the complement of the discrete Wigner function. 

We expect the expansion to be of use in quantum information applications 
since qubits typically are represented by a discrete, and finite-dimensional 
physical system of dimension N = 2 P , where p is the number of qubits in- 
volved. As a particular example we use the expansion to prove that an inter- 
mediate measurement basis (a Breidbart basis) cannot be found if the Hilbert 
space dimension is 3 or 4. 

PACS numbers: 03.65.Bz, 03.65.Ca, 03.67.-a, 42.50.-p 
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I. INTRODUCTION 



Quantum physics and information theory are presently melting together in a new in- 
terdisciplinary field, quantum information theory. Information science has always centered 
around discrete, and mainly binary, representations of information. To represent informa- 
tion by discrete states is by no way necessary, but the robustness of discrete (or digital) 
representations of information against physical imperfections and coupling to the environ- 
ment has resulted in one of the most rapid and pivotal revolutions of mankind, the digital 
revolution. 

The digital revolution has also affected quantum mechanics, where systems with discrete 
eigenvalue spectra have recently attracted considerable attention. Examples include few 
photon states |TJ, ion traps 0, few atom cavity QED systems 0, superconducting junctions 
Hj], nuclear spins ||, and Bose-Einstein condensates of atoms ||. With such systems one 
can implement qubits and qubytes, the quantum analogs to classical binary information. 

While quantum mechanics allow feats that seems not be possible in a classical world, 
such as factorization of numbers in a polynomial time quantum theory comes with a 
price. The ubiquitous, and probably natural, representation of quantum mechanics involves 
complex numbers that makes both computation and visualization of problems more difficult 
than in a corresponding classical theory that is based on real numbers. In an aptly titled 
paper, Wootters have addressed the question whether or not complex numbers are strictly 
necessary in quantum mechanics || . On this point his paper is inconclusive, we tend to think 
that the complex numbers are needed. (Recent results by Hardy also indicate that quantum 
mechanics, describing transitions between states as continuous, naturally leads to a complex 
number notation [ItJ.) However, Wootters goes some way towards providing a description 



of quantum mechanics that avoids, as much as possible, the "phases" of quantum states and 
expresses the states only in probabilities. Specifically, Wootters proposes a real and positive 
probability distribution that is unique for any quantum state defined in a Hilbert space of 
finite known dimension |J. The probability function can be used as a visualization tool, 
much like the P [11,I2|, Q, R, or Wigner [13] quasi-probability representations. It can also 



be used to compute e.g. transition probabilities, but to this end it seems less suitable than 
the conventional representations. 

In this paper we build on Wootters probability distribution function and show that 
the function is not only a state representation. It is also directly associated with a state 



expansion, or more generally, a Hermitian operator expansion due to I. D. Ivanovic [14,15 



This expansion has two appealing features. It has a very symmetric form (it does not rely 
on a particular basis). Instead, all the complementary (to be defined rigorously below) bases 
enter on the same footing. In addition, all the expansion coefficients are real and positive, 
and they equal the measurement probability outcomes of the aforementioned complementary 
bases. A restriction of the expansion is that it is only defined in Hilbert spaces where the 
dimension is a prime to an integer power. However, this encompasses the important case 
2 P , p = 1,2, . . ., that is, any implementation of qubits. 

Wootters has also defined a discrete Wigner function [[RJ that has many common features, 
but also has some dissimilarities, to its continuous counterpart. One dissimilarity is that 
it seems to be more difficult, or at least be less efficient from the measurement point of 
view, to tomographically reconstruct a system in a Hilbert space of composite dimension, 
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e.g. a spin 5/2 particle that is defined in a 6 = 2 • 3 dimensional Hilbert space, than a 
particle defined in a prime dimensional Hilbert space, e.g. a spin 3 particle, that is defined 
in a 7 dimensional Hilbert space. We believe the origin of these difficulties can be traced 
to the underlying discrete mathematics, where the dimension of the linear vector spaces 
allows, or prohibits, different constructs such as groups, rings and fields. Discrete operator 



complementarity has an intimate connection to these mathematical constructs [|IJ,|17|-|20 
Wootters constructed his discrete Wigner function on the same complementary operator 
set that his probability distribution representation, and our operator expansion, is built 
on. Recently, we proposed a tomographic reconstruction algorithm for Wootters' Wigner 
function, based on Ivanovic's expansion [pi]] . The density matrix, the Wigner function, and 
Ivanovic's expansion can be seen as three equivalent, closely connected, state representations. 
In particular, the expansion and the discrete Wigner function can be seen as each other's 



complement. Going from one to the other involves a rather simple transformation [21 



Tomographic reconstruction of a discrete Wigner function (but defined differently than the 
one Wootters has proposed) has been discussed by Leonhardt p2fl . State reconstruction 
algorithms of states belonging to a discrete and finite Hilbert space have been discussed by 



several workers ||23|| . Determination of a a priori unknown state in a iV dimensional space will 
require N 2 — 1 projective measurements if they are non- redundant. If, in addition, they are 
optimal, all the various projections should either be mutually orthogonal or complementary. 
An interesting proposal has been put forth by Amiet and Weigert, where they show that 
reconstruction of a spin state can be accomplished through spin measurements performed 



by a Stern-Gerlach apparatus oriented along various directions in space [24]. However, we 



suspect that the projections are not optimal in the sense discussed above. 

The paper is organized as follows. The expansion is introduced in Sec. [H|. m Sec. 
PTI| we apply the expansion to an example. Specifically, we try to find the intermediate 
measurement basis for eavesdropping applications in quantum secret key distribution. In 
Sec [TV] we summarize our findings. Finally, a proof of the expansion is relegated to Appendix 
[A[ The proof is somewhat tedious, but one point of the proof is worth observing. Most 
of the proof is void of quantum mechanical "phases", but to complete it, we have needed 
to invoke the phase relationships between states from the different complementary bases. 
This makes us pessimistic about a formulation of quantum mechanics based entirely on real 
numbers with no complex "phases". 



II. AN OPERATOR EXPANSION 



Consider an A-dimensional Hilbert space T~Cn, spanned by the set of orthonormal 
basis vectors {\4>oi), IV'02), • • • , \^qn)}- The associated density operators will be denoted 
{/5oi, A)2, • • • ,Pon}- Since this is a complete basis, there exist an associated observable, and 
some physical measurement apparatus corresponding to this observable can be constructed. 
Conversely, the eigenvectors of any observable, defined in this Hilbert space can serve as a 
complete basis. If the space dimension A is a prime, or the power of a prime, then there 
exist a set of N additional bases, each with N orthonormal vectors {\ipki), \i ) k2), • • • , [V'fciv)} 
where k — 1, 2, . . . , N (the associated density matrices will be denoted pki) such that all the 
N + 1 bases are mutually complementary [|14],|17| . Complementary bases (sometimes called 
mutually unbiased bases) in Ji^ have the property that 
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Tf . . i ft if k = m, m 

TrW mn | - j 1/JV y ^ ifMm _ (1) 

That is, if the state \ipki) is prepared in basis k but measured in basis m ^ k, all A" possible 
measurement outcomes are equally probable regardless of I. This property is exploited in 
various quantum key distribution protocols |25],|26]. 



The N + l bases also have an intimate relation to the discrete Wigner function defined by 
Wootters | I6| . Alternatively one could claim that it is Wootter's discrete Wigner function 



that is related to complementarity. Indirectly these operators also have connections to the 
discrete cyclic permutation groups fH] ,|I 



Now consider an arbitrary Hermitian operator O defined in Ti^. Ivanovic |14| has shown 
that it is always possible to expand this operator as 

N N 

= EE Ti{p kl d}p kl - Tr{6}i, (2) 

k=0 1=1 

where 1 is the identity operator. (Since any operator O can be written as the linear com- 
bination of the two Hermitian operators O + O^ and i[0 — O'] the expansion is in fact 
valid for any operator although in this case the expansion coefficients Tr{pkiO} are not real 
numbers.) We shall derive this result in a different manner in the Appendix. The main 
difference between this expansion and the more conventional expansion 

N N 

6 = ^{^mq\d\lp m n)\'lp m q){'lpmn\ (3) 

5=1 n=l 

is that (0) only contains real-valued expansion coefficients Tt{pmO}. These coefficients are 
the respective expectation values of the states \ipki) if measured by the observable O. In 
addition, the expansion @ has a "symmetric" form, all bases in the complementary basis 
sets enter the expansion on equal footing. Of course there exist an infinite number of possi- 
bilities to choose the complete set of complementary bases since any unitary transformation 
will rotate the bases while preserving their respective mutual properties, and in particular 
(HI). However, in (|3]) only one of the N + 1 bases is used in the expansion. For problems 
with an inherent " symmetry" with respect of the complementary bases, such as secret key 
distribution, the expansion (|2|) offers clear advantages. The "price" to be paid by using this 
expansion is that the expansion vectors form an overcomplete set and therefore we must 
subtract a term proportional to the identity. In addition, the expansion is only defined in 
Hilbert spaces with a dimension that is a prime to an integer power. This is because there 
is no known way to construct N + 1 mutually complementary bases in a A" dimensional 
composite Hilbert space. It is not even known if such a construction is even possible (we 
suspect it is not). 

Consider the standard expansion (0) of a general Hermitian operator in TCn- The oper- 
ator is fully described by A^ 2 complex coefficients. However, since p is Hermitian, only A^ 2 
real numbers are needed to define the A^ 2 complex coefficients. The expansion (Q) contains 
(N + 1)N real coefficients. However, since for every basis k, the sum of the real coefficients 
equals the trace of the operator, that is J^fLi Tr{/3fc/0} = Tr{0}, we only need to know all 
A" real coefficients in one basis. In the remaining A^ bases it suffices to know A^ — 1 of the 
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coefficients, the last one can be deduced from the trace of the operator. Thus, the expansion 
(g) is also fully specified by N + N(N — 1) = iV 2 real numbers. (If the operator happens 
to be a density operator p describing a general state, only iV 2 — 1 real numbers are needed 
since Tr{p} = 1.) This demonstrates that the expansion (|2|) can be considered a maximally 
compact representation in the same sense that the expansion (|3|) can be called maximally 
compact. 

Furthermore, since the coefficient Tr{pkif>} is the projection probability of the state p 
onto the vector \ipki)-, the expansion shows that if the state p is unknown, that is, no a priori 
information about the expansion coefficients Tr{pkip} exist, the optimal way to estimate 
them using non-adaptive von Neumann measurements is to subdivide an ensemble of M 
identically prepared systems into iV + 1 sub-ensembles, each containing M/(N+1) members, 
and on each of the sub-ensembles measure the statistical distribution of one of the N + 1 
complementary operators to obtain an estimate of the coefficients. That this is the optimal 
way to proceed follows from: 1) That a measurement of an ensemble of states in basis 
k carries no information about the outcome of a measurement on an identically prepared 
ensemble using basis m ^ k due to ([[]). 2) That all expansion coefficients Ti{pkip} are needed 
to fully specify the state. 3) That the minimum number of von Neumann measurements 
containing N 2 — 1 mutually orthogonal, or complementary, projections is N + 1. That such 
a measurement is an optimal non-adaptive von Neumann state reconstruction algorithm was 
shown earlier by Wootters and Fields Jl7|]. They proved that such a measurement strategy 
minimizes the volume of the Hilbert space in which one can expect to find the state with 
a given confidence. However, it has also been shown that measurements that give a better 
fidelity |27] or a smaller Bayes cost [28] between the estimated state (for a finite measured 
ensemble) and the prepared state exist. They are either a joint measurement on the whole 
ensemble of systems P7J, or sequential adaptive measurements 



III. CONSTRUCTION OF AN INTERMEDIATE MEASUREMENT BASIS 

In this section we will demonstrate the utility of the expansion (^) in problems with an 
inherent symmetry between a full set of complementary bases. The example we have picked 
is the construction of an intermediate measurement basis, or a Breidbart basis. 

The use of quantum states for fundamentally secure distribution of cryptographic se- 
cret key distribution was proposed several years ago. The original proposal, called BB84, 
defined a two-state, two complementary bases protocol [M. An extension made by Brufi 
|25| and Bechmann-Pasquinucci and Gisin [^6| to a six-state (three complementary bases) 



protocol shows that an eavesdropper's (by convention denoted by Eve) information gain 
for a given impaired error rate is lower than in the BB84 protocol f25| , |2"6|| . Very recently 
Bechmann-Pasquinucci and Tittel H31J1 , Bechmann-Pasquinucci and Peres [p2 |, and Boure- 



nanne, Karlsson and Bjork [^3| have considered schemes using four states and two bases, 
three states and four bases, and M states and N bases, respectively. Below we shall con- 
sider an iV-state, N + 1 bases protocol, of which the aforementioned two-state, three bases 
protocol is a special case. 

In such a quantum secret key distribution system one party (Alice) randomly chooses 
a letter I from an iV-ary alphabet and a basis k among N + 1 complementary bases. She 
subsequently prepares and transmits the state pki to the other party (Bob). Bob randomly 
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chooses a measurement basis m among the N + 1 possibilities, and if the basis coincides with 
Alice's, he concludes that the received state is pui- If he chooses the wrong base, m ^ k, 
(which will happen with a probability N/(N + 1)), then he will detect the state p mn with 
probability 1/N and conclude that this was the received state. When Alice and Bob publicly 
compare the used transmission and detection bases they can discard the events when their 
respective bases did not coincide and keep only those when the bases, and therefore the 
transmitted and received symbol, coincide. 

An intermediate basis ||34|| , that is a suitable measurement basis for an eavesdropper, 



utilizes the symmetry properties of the transmission protocol. The intermediate basis for 
the case of a two state, two bases protocol is illustrated in Fig. |1|. The idea is to find 
a measurement operator that lets Eve correctly infer the sent state with high probability. 
This assures that when she passes along her measurement eigenstate to Bob, the state Alice 
originally sent, and the state passed along, will have a high fidelity. Hence, Eve gains 
substantial information about Alice's and Bob's key, while disturbing the states Alice sends 
to Bob relatively little. 

The intermediate operator consists of a set of orthonormal Hermitian operators 
{gi, Q2, . . . , Qn} such that each operator optimizes the expansion probability of the states 
representing one specific letter in the alphabet and makes the expansion probabilities for 
the states representing the other letters equal. Mathematically, this can be stated as 

Tr{^p fc i} = . . . = Tr{g k p m } = x V I, (4) 

and 

T^iQnhi} = U V k and V I ^ n, (5) 
where < y < x. In addition, we require orthonormality between the intermediate operators 

Tr{g n } = l V n, (6) 



Tt{qiq„} = 5, 



In ■ 



(7) 



In the example illustrated in Fig. [I] we can see that Tr{gipu} = Tt{qiP2i} = 
cos 2 (±tt/8) w 0.85 for I = 1,2 and Tr{^p fe2 } = Tr{g 2 p kl } = cos 2 (tt/2 ± vr/8) w 0.15 
for k = 1,2. For a two state, three bases protocol, the construction of an intermediate basis 
can also be done by a geometrical construction (on the Bloch sphere). In protocols involving 
only two states in each of N > 3 complementary bases the construction of the intermediate 
basis is still relatively straight-forward [Q. However, for the protocol we consider here, it 
has hitherto not been obvious how, or even if it is possible, to make the construction when 
N>2. 

To construct these operators we use the expansion Using the properties above, and 
symmetry of the operator expansion, we get 



Qn 



N 

E 

fc=0 



N 



XPkn + E UPkl 



1=1 
l^n 



(8) 
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This construction makes g n of a form such that it can satisfy property (|) for an appropriate 
choice of x, and it will simultaneously satisfy (|5]). The normalization condition (|6]) leads to 
the additional equation 

1 — x 

and, finally, inserting (^) in the orthogonality condition ([T|) leads to the relation 



1 1 N-3 , . 

x= N + iw + N(NTTy (10) 

where the solution giving x > y is chosen. 

The caveat emptor of this construction algorithm is that we are not guaranteed that the 
intermediate operators derived this way are von Neumann projection operators, and they 
may in principle not even have a representation as a positive operator measurement. This 
must be checked separately. 



A. N = 2 



In two-dimensional Hilbert-space, the explicit construction of the complementary bases 
is straightforward. Choose any two orthogonal vectors \ipoi) an d | ^02) ■ The complementary 
operator eigenstates can then be chosen to be 



and 



\M = (|-0O1> + |V>02»/V2, 
|V>12> = (I'M - |V>02»/V2, 

|^2l) = (|V'0l)+#02))/v / 2, 
|^22) = (|^0l)-#02))/v / 2. 



(11) 

(12) 

(13) 
(14) 



A physical example of such a triplet of complementary two state operators are the spin 
operators in the x, y, and z-directions of a spin 1/2 particle. Plugging these states into (^j), 
and using (||) and (fLOf) , one finds the operators 

1 - 

Vs 
-1 



Qi 



Q2 



1 



1 



1 



1 + i 
y/3-1 



-1 



(15) 



(16) 



It is easy to check that the two operators have only one non-zero eigenvalue and hence 
correspond to a von Neumann measurement by virtue of (§) and (^|). From ( |T0D it is clear 
that if Eve uses this intermediate basis, she will correctly guess which letter Alice encoded 
on the transmitted state with probability 1/2 + 12 -1 / 2 w 0.789 irrespective of which of the 
three bases Alice used for the encoding. If, instead, she were to chose the simpler intercept 
and resend strategy, she would only get the right answer with probability 2/3 ~ 0.667. In 
1 33| various eavesdropping strategies for high dimensional secret key distribution protocols 
are compared. 
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B. N = 3 



The respective basis vectors in this space can be constructed using the method in [II 
Repeating the construction algorithm for the intermediate operators for this Hilbert space, 
one finds that the operators are given by 

"4 
1 3 
3 1 



Qi = t: 



(17) 



L>2 



and 



03 





2 
3 

-l-iy/3 
4 





1 

6 

-l+iV3 
4 





-l±iVE 
4 
1 
6 





4 
2 
3 



(18) 



(19) 



Although these operators satisfy all of the criteria (§) - (0) they do not correspond to any 
physical measurements because they all have one negative eigenvalue (the eigenvalues of g± 
are —1/3, 2/3 and 2/3, and the eigenvalues of both Q2 and £3 are (5 - 3 v / 5)/12, 1/6, and 
(5 + 3V5)/12). Since the expansion (0) is general in the sense that any Hermitian operator 
has an unique such expansion, and ( |i~7[ ) is the only solution satisfying (f|) - (|7|), we conclude 
that an intermediate measurement basis cannot be found in this space. 



C. N = 4 



The result in this case is similar to that of the three-dimensional Hilbert space. The 
complementary eigenvectors can be constructed using the method described in [ IT] . We find 
that the first of the intermediate operators is 



0i 



2^/5 



VE+3 
2 

—i 
1 - i 




1 







1 + z 
1 - i 

V5-1 
2 

1 






1 

y/5- 



(20) 



We do not explicitely give the other three, since all the operators have one negative eigenvalue 
and therefore cannot correspond to a directly measurable quantity. 



D. Conjecture 

From our trials above, we conjecture that for Hilbert-spaces of dimension larger than 
two, intermediate measurement operators do not exist. It seems that the severe constraints 
for such an operator, expressed by Eq. ([§)-([/]), do not permit positive Hermitian operators, 
although Hermitian operators with negative eigenvalues fulfilling the constraints can be 
found. 
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IV. CONCLUSIONS 



We have discussed an expansion [13] of an arbitrary Hermitian operator based on the 
N + 1 complementary bases in a Hilbert space of dimension N, where N is a prime number, 
or an integer power of a prime. If one expands a density operator this way, the expansion co- 
efficients constitute a compact probability distribution function with iV(iV + l) real, positive 
coefficients, unique to every state, as demonstrated by Wootters @. We have subsequently 
used the expansion to try to find an intermediate measurement basis, suitable for eavesdrop- 
ping in secret key distribution applications. We find that a set of Hermitian operators with 
the proper characteristics can be found in every Hilbert space of prime, or integer power of 
a prime, dimension. However, when examining the solutions in Hilbert spaces of dimension 
2, 3, and 4, we find that only in the first case does the operators correspond to a physical 
measurement. From these examples we conjecture that in Hilbert spaces of dimension higher 
than two, it is not possible to construct an intermediate basis measurement apparatus. 
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APPENDIX A: PROOF 

To prove that the expansion (0) holds for an arbitrary Hermitian operator we expand 
the operator according to (|3|) and insert the expansion in We denote the expansion- 
coefficient (^mq\0\^mn) = O qn . We get 

N N N N 

O = ^2^2Tr{p M £ O qn \ip mq )(ij mn \}p k i - 

k=0 1=1 q=l n=l 

N N 

iH££o g nlVW(Vw|}i- (Ai) 

q=l n=l 



The last sum on the right hand side of (|A1|) evaluates trivially to 

N N I N \ 

TH££o^lVW<Vw|}i= £oJ i (A2) 

q=l n=l \q=l J 

To see what the first sum evaluates to we divide it into two. One sum runs over the density 
operators of basis m, while the other sum runs over all the remaining N bases' associated 
density operators, v.i.z. 
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N N N N 

EE^hE J2°m\' l Pmq)(lpmn\}Pkl = 
k=Ol=l 9=ln=l 

N N N 

EE E Tl {pml°qn\?Pmq)(4>mn\}prnl + 
1=1 q=l n=l 

N N N N 

EEEE T^iPklOqnllpmq) (^mn\}pkl = Si + 5*2. (A3) 
fc=0 1=1 q=l n=l 

The first term on the right hand side of ( |A3| ) can, using the orthonormality of the basis m, 
easily be computed. 

N 

Sl = J2 °qqPmq- (A4) 
9=1 

The second term we subdivide into 

iV if JV 



S2 = E EE ??^™/!/ 5 ^™?)/ 5 



. . 'fc2 
fc=o Z=l q=l 

V N N N 

+ I^EE Og n (Vw|pfcz|Vw>)/5/d (A5) 

ft=0 i=l g=l n=l 

= S 3 + S 4 . (A6) 
Using (|5) the term 53 can be reduced to 

AT N N 

s 3 = EEE ( A7 ) 

ft=0 i=l <J=1 

Noting that Y^iLi Pkl — 1 f° r every fc, the sum can be further simplified to 

N ( N \ 

S 3 = Nj20 gq l/N= Eo M U- (A8) 

q=l \q=l j 

Finally, to simplify 5*4 we compute the expansion coefficient u, v of the term containing the 
term O qn in the basis m 7^ k. That is, we delay the summation over q and n until we have 
found a convenient way to simplify the sums over k and I. We find that if u = q and v = n 
then 

N N 

(Vw| E ^(i>mn\Pkl\i>mq)f>kl\' l l>mv) = 
fc=0 1=1 

N N 



(lpmq\ E ^(^mnlPkll^mq) Pkl\lpmn) 



fc=0 1=1 
k^m 
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N N 



E E ^™q \ Tpkl ) (lpkl\ ^mq) (VW I V'JH ) (^H I ) 



fc=0 i=l 



N N 



E E ViV 2 = 1, (A9) 



fe=0 1=1 
k^m 



where (|l|) was used once more. If u = q but v ^ n then we get 



N N 

(lpmq\ E E^wnlPwlV'm?) PfczlVw) = 
fc=0 i=l 

JV AT 

E Y(' l Prnq\^kl)(i'kl\i'mq)(^mn\^kl)(i'kl\^mv) = 
fc=o 2=1 

A A (lpmn\lpkl){^kl\^>mv) _ A (Vwl l|VWu) _ n / A n s 

fc=0 Z=l fc=0 

k^m k^m 

The same result is obtained when u ^ q but v = n. Note that so far in our proof we have 
not needed to invoke any "phase relationship" between the complementary states. However, 
to complete our proof we now need to use the inner product between the complementary 
basis states including the "phases" of the inner products. Below we shall show that when 
u 7^ q and ti^n the sum evaluates to 

N N 

E Y(^ m u\^kl)(^kl\^rnq)(^mn\^kl)(^kl\^mv) = 0. (All) 

fc=0 1=1 
ky^m 



Since Eq. (|A9j) -( A"TI ) are true for every q and n in the sum S4, we can use the follow- 
ing simplification before summing S 4 over the indices E^Lo Ejli O qn (%l) mn \p k i\il) mq )p k i = 

k^m 

O qn \'4 } mq)(' l Pmn\- The sum S4 now can be expressed 

N N 

S4 = E E Oqn\4>mq)(4>mn\- (A12) 

q=l n=l 
n^q 



Finally, summing (|A4|) , (|A"8|) , (|A12|) and subtracting ( |A"2|) , the standard expansion (|3]) is 



obtained. The proof is hence completed. 



1. Proof of ( [All ) when is a power of an odd prime 



Here we prove that ( |A11| ) is correct provided that the Hilbert space dimension N = Nf 
is a power of an odd prime, q 7^ u, and v 7^ n. 



We follow the nomenclature in [17| to express the phases occurring in the scalar products 



in ( [A 11| ). To this end we assign a p-component column vector with entries corresponding 
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to the index value expressed in base Ni to each of the basis vector indices u, /, q, n, and v. 
E.g if JV = 81 = 3 4 the value u = 71 = 2 • 3 3 + 1 • 3 2 + 2 • 3 + 2 has the associated vector 
u T = (2,1,2,2), where the superscript T indicates the transpose. A p-component column 
vector k is also associated to each basis, excluding the basis Wootters and Fields calls the 
"standard basis" , which we will take to be the base m. Since the first sum in Eq. ( [A lip sum 



runs over all bases other than our chosen standard basis, the numbering of the remaining N 
bases is irrelevant. The vectors k T hence run from (0, 0, ... , 0) to (Ni — 1, Ni — 1, . . . , Ni — 1). 
Finally we use the tensor a that is a p-component vector of p by p matrices defining the 
field algebra. Every matrix <x,-, where j — 0, 1, . . . , p, is a symmetric matrix. Now assume 
that Ni ^ 2 and use the complementary bases defined by Wootters. The scalar products in 
( [A becomes fT?] 



N N 

N 2 



1 ^ ^ e (2vri/iV l )[u T (k-Q)u+l T u] e -(2 7 ri/iV,)[q T (k-a)q+l T q] . 



k=l 1=1 



e (27ri/iVi)[n T (k-a)n+l T n] e -(27ri/A r l )[v T (k-a)v+l T v] 
1 N 

1 „(27ri/Af i )[u T (k-«)u-q T (k-a)q 
N 

e (27ri/A r l )n T (k-a)n~v T (k-a)v] e (2iri / N,)[l T '(u-q+n-v)] _ (A13) 

1=1 

The last sum in this expression will be N if and only if u — q + n — v = 0. Otherwise the 
result will be zero. However, we are interested only in the case when n ^ q. Let us put 
n = q + s, where s ^ 0. The equation above then gives v — u + s. Inserting these relations, 
and defining a p-component column vector s in analogy with the other index vectors, leads 
to 

i N 

J_ p (27ri/A r 0[u T (k-a)u-q T (k-Q)q 

Nti 

e (27ri/A r l )(q T +s T )(k-a)(q+s)-(u T +s T )(k-a)(u+s)] 
, N 

_ e (2«/^)[(q T -" T )(k-a)s+s T (k. Q )(q-u)] ( AU j 
^ k=l 

At this point we recall the meaning of the tensor product in the exponent of ( |A14j ). We 
have defined a N element field. We can number the field elements with an index running 
from 1 to N, and this number can be expressed as a p-component vector if N — i is used as 
the basis, as exemplified with u above. The product between any two elements of the field 
is also an element of the field. Suppose we multiply the field elements number q — u and s. 
We assume that the result is field element number r. If r is expressed as a vector r, then the 
(p ~ i)th coefficient of r will be (q T — u T )<x,s. Multiplication between elements of a field is 
commutative. Therefore, for any given k, the following equality holds 

(q T - u T )(k • a)s = s T (k • a)(q - u). (A15) 



This implies, as stated above, that every matrix atj is symmetric. The relation (|A15 ) enables 
us to write the sum (|A14 ) as 
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1 N 

_ e ( 4 W^)[(q T -u T )(k-a)s)] _ ( A1Q ^ 
™ k=l 

Since we know that q ^ u and s 7^ 0, the product of the element number q — u and s is a 
non-zero element of the field. Let us once more assume that the product is the rth element. 
Forming the tensor product (q T — u T )(k • a)s, and stepping the index vector k successively 
through all the numbers from 1 to AT = Nf, will multiply each component of the vector r 
an equal number of times with the integers 0, 1, . . . , Aj — 1, and then add the results, in 
such a way that the shortest repetitive cycle of the whole process is exactly N. The digit 
sum [modulus Ni, but this is already naturally incorporated in ( |Al(j| ) through the pre-f actor 



(Airi/Ni) in the exponent] will equal each of the numbers 0, 1, . . . , Aj exactly N/N{ = Nf 
times, and therefore the sum ( |A16| ) will equal zero. 

To fully appreciate what was just said we will exemplify in Table [I] the calculations by 
assuming that iV = 9 giving Aj = 3 and p = 2. We will demonstrate the statement above 
assuming that the product of the elements number q — u and s is r — 1 — > i"i = (0, 1), 
r = 4 — > r4 = (1, 1), and r = 5 — > r$ — (1, 2), respectively. The assertion is of course true 
for any r = 1, 2, . . . , 9. In the three "Sum" columns we see that each of the integers 0, 1, 
and 2 appears exactly N/N\ = 9/3 = 3 times. Hence, the sum of the exponentials (|A16|) 



will equal zero. It is not hard to see why this will be true for any combination of non-zero 
elements q — u and s. 



2. Proof of ( [ATTD when N is a power of two 

If Ni = 2, the proof goes along the same lines and one arrives at the sum 

1 N 

_L V P M[(q T -u T )(k-c0s)] 



N 



E 

k=l 



(A17) 



instead of (|A16|) , where, again, q — u^0 and s 7^ 0. By the construction of the field algebra, 
the exponent will take on the values and 1, respectively, exactly 2 P_1 = times as k goes 
from 1 to AT = 2 P . Therefore the sum equals zero in this case, too. 
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FIGURES 

FIG. 1. In the BB84 secret key distribution protocol symbol 1 is randomly coded on state 
or IV^i) and symbol 2 is randomly coded on state \1p\2) or \ip22)- The intermediate operator 
eigenvectors are denoted \(3\) and \@2)- 



16 



TABLES 



TABLE I. A table demonstrating the construction of the exponents in Eq. ( |A16|) for the case 
N = 9. The element r, indicating the result of the product between the field elements number 
q — u and s, can be any non-zero element of the field. We have, arbitrarily, made the calculations 
giving the results if r = 1,4, and 5, respectively. We have made the calculations modulus 3, but 
this is not necessary since the Eq. ( |A16 ) naturally incorporates this by the exponent pre- factor 
Am/3. 

Sum 



k 


k T 


T 
r l 


k T rl 


Sum 


T 


k T r 4 


Sum 


T 
r 5 


k T r 5 


1 


(0,1) 


(0,1) 


0+1 


1 


(Li) 


0+1 


1 


(L2) 


0+2 


2 


(0,2) 


(0,1) 


0+2 


2 


(Li) 


0+2 


2 


(1,2) 


0+1 


3 


(LO) 


(0,1) 


0+0 





(Li) 


1+0 


1 


(1,2) 


1+0 


4 


(LI) 


(0,1) 


0+1 


1 


(Li) 


1+1 


2 


(1,2) 


1+2 


5 


(1,2) 


(0,1) 


0+2 


2 


(Li) 


1+2 





(1,2) 


1+1 


6 


(2,0) 


(0,1) 


0+0 





(Li) 


2+0 


2 


(1,2) 


2+0 


7 


(2,1) 


(0,1) 


0+1 


1 


(Li) 


2+1 





(1,2) 


2+2 


8 


(2,2) 


(0,1) 


0+2 


2 


(Li) 


2+2 


1 


(1,2) 


2+1 


9 


(o,o) 


(0,1) 


0+0 





(Li) 


0+0 





(L2) 


0+0 
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